# Audit testing the code

**URL:** <https://meta.discourse.org/t/audit-testing-the-code/228780>\
**Category:** Development\
**Created:** [June 1, 2022, 7:08pm UTC](https://meta.discourse.org/t/audit-testing-the-code/228780 "2022-06-01T19:08:11Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![matt\_c](https://avatars.discourse-cdn.com/v4/letter/m/c0e974/32.png) [@matt\_c](https://meta.discourse.org/u/matt_c)\
**Post date:** [June 1, 2022, 7:08pm UTC](https://meta.discourse.org/t/audit-testing-the-code/228780/1 "2022-06-01T19:08:11Z")

</div>

Hi, I’m new to ruby on rails and discourse.  
I wanted to verify the security of the code by doing some audit testing. I’m aware that it can sometime falsely detect problems.  
I was wondering if Discourse had any audit testing already integrated. I tried integrating Brakeman and it gave me a bunch of different warning like sql injections ,dangerous evaluation and ssl verification bypass. I’m in the process to verify the validity of each warning, but I’m sometimes uncertain whether or not I should discard the warning.

---

_[View the full topic](https://meta.discourse.org/t/audit-testing-the-code/228780)._